fix: 调整 chat WS/WT dev 接入

WT 目前沿用 JToken 的 JWT 校验；撤销一致性留到后续 WT 专用网关设计。

deploy/dev/README.md

@@ -31,6 +31,8 @@ docker compose down
 
 端到端接口测试走网关 `http://127.0.0.1:18080`，`18801-18814` 是各服务的直连端口，不经过认证链路。
 
+Chat WebSocket 通过网关 `ws://127.0.0.1:18080/ws/chat` 访问。WebTransport 使用 `18443/udp` 的 `/wt/chat` 入口。
+
 如需只启动部分服务：
 
 ```bash
@@ -39,26 +41,26 @@ docker compose up -d postgres redis snowflake player-rpc player-api
 
 ## 端口映射
 
-| 服务             | 宿主机端口 |
-| ---------------- | ---------- |
-| PostgreSQL       | 15432      |
-| Redis            | 16379      |
-| Kafka            | 19092      |
-| Envoy Gateway    | 18080      |
-| users-api        | 18801      |
-| player-api       | 18802      |
-| game-api         | 18803      |
-| shop-api         | 18804      |
-| order-api        | 18805      |
-| wallet-api       | 18806      |
-| community-api    | 18807      |
-| objectstory-api  | 18808      |
-| email-api        | 18809      |
-| chat-api         | 18810      |
-| review-api       | 18811      |
-| dispute-api      | 18812      |
-| notification-api | 18813      |
-| search-api       | 18814      |
+| 服务             | 宿主机端口       |
+| ---------------- | ---------------- |
+| PostgreSQL       | 15432            |
+| Redis            | 16379            |
+| Kafka            | 19092            |
+| Envoy Gateway    | 18080            |
+| users-api        | 18801            |
+| player-api       | 18802            |
+| game-api         | 18803            |
+| shop-api         | 18804            |
+| order-api        | 18805            |
+| wallet-api       | 18806            |
+| community-api    | 18807            |
+| objectstory-api  | 18808            |
+| email-api        | 18809            |
+| chat-api         | 18810, 18443/udp |
+| review-api       | 18811            |
+| dispute-api      | 18812            |
+| notification-api | 18813            |
+| search-api       | 18814            |
 
 ## 环境变量
 

deploy/dev/docker-compose.yml

@@ -444,7 +444,6 @@ services:
     restart: unless-stopped
     ports:
       - "18810:8888"
-      - "18889:8889"
       - "18443:8443/udp"
     volumes:
       - ./certs:/etc/certs:ro
@@ -464,6 +463,8 @@ services:
         condition: service_started
       order-rpc:
         condition: service_started
+      player-rpc:
+        condition: service_started
 
   dispute-api:
     image: juwan/dispute-api:dev
@@ -477,6 +478,8 @@ services:
         condition: service_started
       order-rpc:
         condition: service_started
+      player-rpc:
+        condition: service_started
 
   notification-api:
     image: juwan/notification-api:dev

deploy/dev/envoy.yaml

@@ -375,10 +375,12 @@ static_resources:
                             timeout: 30s
 
                         - match:
-                            prefix: /api/v1/chat
+                            path: /ws/chat
                           route:
                             cluster: chat_api_cluster
-                            timeout: 30s
+                            timeout: 0s
+                            upgrade_configs:
+                              - upgrade_type: websocket
 
                         - match:
                             path: /api/v1/upload
@@ -597,6 +599,10 @@ static_resources:
                       rules:
                         - match:
                             path: /healthz
+                        - match:
+                            path: /ws/chat
+                          requires:
+                            provider_name: juwan_user_jwt
                         - match:
                             prefix: /api/v1
                             headers: